@specforge/cli 0.1.0

package/dist/cli/config/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/config/validation.ts"],"sourcesContent":["/**\n * Config Schema Validation\n *\n * Validates the extended .specforge/config.json configuration schema.\n * Each section is validated independently — absent sections are\n * considered valid (all sections are optional).\n *\n * Uses manual validation (no external libs) to match existing patterns.\n */\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * A single validation error with field path and expected values.\n */\nexport interface ValidationError {\n  /** Dot-separated field path (e.g., \"agentTeams.strategy\") */\n  field: string;\n  /** Human-readable error message including expected values */\n  message: string;\n  /** The actual value that failed validation */\n  value: unknown;\n}\n\n/**\n * Result of a validation operation.\n */\nexport interface ValidationResult {\n  /** Whether all validations passed */\n  valid: boolean;\n  /** List of validation errors (empty when valid) */\n  errors: ValidationError[];\n}\n\n// ---------------------------------------------------------------------------\n// Allowed values\n// ---------------------------------------------------------------------------\n\nconst ALLOWED_STRATEGIES = ['auto', 'single', 'parallel', 'phased'] as const;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction err(field: string, message: string, value: unknown): ValidationError {\n  return { field, message, value };\n}\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\n}\n\nfunction oneOf(field: string, value: unknown, allowed: readonly string[]): ValidationError | null {\n  if (typeof value !== 'string' || !allowed.includes(value)) {\n    return err(field, `Must be one of: ${allowed.join(', ')}`, value);\n  }\n  return null;\n}\n\nfunction numberInRange(field: string, value: unknown, min: number, max: number): ValidationError | null {\n  if (typeof value !== 'number' || !Number.isFinite(value) || value < min || value > max) {\n    return err(field, `Must be a number between ${min} and ${max}`, value);\n  }\n  return null;\n}\n\nfunction mustBeBoolean(field: string, value: unknown): ValidationError | null {\n  if (typeof value !== 'boolean') {\n    return err(field, 'Must be a boolean', value);\n  }\n  return null;\n}\n\nfunction mustBeString(field: string, value: unknown): ValidationError | null {\n  if (typeof value !== 'string') {\n    return err(field, 'Must be a string', value);\n  }\n  return null;\n}\n\nfunction mustBeNonEmptyString(field: string, value: unknown): ValidationError | null {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    return err(field, 'Must be a non-empty string', value);\n  }\n  return null;\n}\n\n// ---------------------------------------------------------------------------\n// Section validators\n// ---------------------------------------------------------------------------\n\n/**\n * Validate the `agentTeams` config section (v2.0.0).\n *\n * Returns valid:true if the section is absent/undefined.\n * Only validates v2.0.0 fields. Deprecated fields are silently ignored.\n */\nexport function validateAgentTeamsConfig(config: unknown): ValidationResult {\n  if (config === undefined || config === null) {\n    return { valid: true, errors: [] };\n  }\n\n  const errors: ValidationError[] = [];\n  const prefix = 'agentTeams';\n\n  if (!isObject(config)) {\n    return { valid: false, errors: [err(prefix, 'Must be an object', config)] };\n  }\n\n  if ('enabled' in config && config.enabled !== undefined) {\n    const e = mustBeBoolean(`${prefix}.enabled`, config.enabled);\n    if (e) errors.push(e);\n  }\n\n  if ('strategy' in config && config.strategy !== undefined) {\n    const e = oneOf(`${prefix}.strategy`, config.strategy, ALLOWED_STRATEGIES);\n    if (e) errors.push(e);\n  }\n\n  if ('maxTicketsPerTeam' in config && config.maxTicketsPerTeam !== undefined) {\n    const e = numberInRange(`${prefix}.maxTicketsPerTeam`, config.maxTicketsPerTeam, 1, 20);\n    if (e) errors.push(e);\n  }\n\n  if ('maxParallelEpics' in config && config.maxParallelEpics !== undefined) {\n    const e = numberInRange(`${prefix}.maxParallelEpics`, config.maxParallelEpics, 1, 10);\n    if (e) errors.push(e);\n  }\n\n  if ('branchPrefix' in config && config.branchPrefix !== undefined) {\n    const e = mustBeString(`${prefix}.branchPrefix`, config.branchPrefix);\n    if (e) errors.push(e);\n  }\n\n  if ('timeoutMinutes' in config && config.timeoutMinutes !== undefined) {\n    const e = numberInRange(`${prefix}.timeoutMinutes`, config.timeoutMinutes, 5, 60);\n    if (e) errors.push(e);\n  }\n\n  return { valid: errors.length === 0, errors };\n}\n\n/**\n * Validate the `activeSpecification` config section.\n *\n * Returns valid:true if the section is absent/undefined.\n * When present, `id`, `title`, and `activatedAt` are required.\n */\nexport function validateActiveSpecification(config: unknown): ValidationResult {\n  if (config === undefined || config === null) {\n    return { valid: true, errors: [] };\n  }\n\n  const errors: ValidationError[] = [];\n  const prefix = 'activeSpecification';\n\n  if (!isObject(config)) {\n    return { valid: false, errors: [err(prefix, 'Must be an object', config)] };\n  }\n\n  // id — required, non-empty string\n  if (!('id' in config) || config.id === undefined) {\n    errors.push(err(`${prefix}.id`, 'Required field is missing', undefined));\n  } else {\n    const e = mustBeNonEmptyString(`${prefix}.id`, config.id);\n    if (e) errors.push(e);\n  }\n\n  // title — required, non-empty string, max 200 chars\n  if (!('title' in config) || config.title === undefined) {\n    errors.push(err(`${prefix}.title`, 'Required field is missing', undefined));\n  } else {\n    const e = mustBeNonEmptyString(`${prefix}.title`, config.title);\n    if (e) {\n      errors.push(e);\n    } else if (typeof config.title === 'string' && config.title.length > 200) {\n      errors.push(err(`${prefix}.title`, 'Must be at most 200 characters', config.title));\n    }\n  }\n\n  // activatedAt — required, valid ISO 8601\n  if (!('activatedAt' in config) || config.activatedAt === undefined) {\n    errors.push(err(`${prefix}.activatedAt`, 'Required field is missing', undefined));\n  } else if (typeof config.activatedAt !== 'string') {\n    errors.push(err(`${prefix}.activatedAt`, 'Must be a string', config.activatedAt));\n  } else if (isNaN(Date.parse(config.activatedAt))) {\n    errors.push(err(`${prefix}.activatedAt`, 'Must be a valid ISO 8601 date string', config.activatedAt));\n  }\n\n  return { valid: errors.length === 0, errors };\n}\n\n// ---------------------------------------------------------------------------\n// Top-level validator\n// ---------------------------------------------------------------------------\n\n/**\n * Validate the entire .specforge/config.json for Agent Teams sections.\n *\n * Orchestrates sub-validators and aggregates all errors.\n * Only validates the Agent Teams sections — existing ProjectConfig\n * fields are validated elsewhere.\n *\n * @param config - Raw parsed JSON object from .specforge/config.json\n * @returns Combined validation result from all sections\n */\nexport function validateSpecforgeJson(config: unknown): ValidationResult {\n  if (config === undefined || config === null) {\n    return { valid: true, errors: [] };\n  }\n\n  if (!isObject(config)) {\n    return { valid: false, errors: [err('config', 'Must be an object', config)] };\n  }\n\n  const results = [\n    validateAgentTeamsConfig(config.agentTeams),\n    validateActiveSpecification(config.activeSpecification),\n  ];\n\n  const errors = results.flatMap(r => r.errors);\n  return { valid: errors.length === 0, errors };\n}\n\n/**\n * Format validation errors into human-readable lines.\n *\n * @param errors - Array of validation errors\n * @returns Formatted error strings, one per line\n */\nexport function formatValidationErrors(errors: ValidationError[]): string[] {\n  return errors.map(e => {\n    const valueStr = e.value === undefined ? 'undefined' : JSON.stringify(e.value);\n    return `  ${e.field}: ${e.message} (got ${valueStr})`;\n  });\n}\n"],"mappings":"AAwCA,MAAM,qBAAqB,CAAC,QAAQ,UAAU,YAAY,QAAQ;AAMlE,SAAS,IAAI,OAAe,SAAiB,OAAiC;AAC5E,SAAO,EAAE,OAAO,SAAS,MAAM;AACjC;AAEA,SAAS,SAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAChE;AAEA,SAAS,MAAM,OAAe,OAAgB,SAAoD;AAChG,MAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,SAAS,KAAK,GAAG;AACzD,WAAO,IAAI,OAAO,mBAAmB,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK;AAAA,EAClE;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAe,OAAgB,KAAa,KAAqC;AACtG,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,OAAO,QAAQ,KAAK;AACtF,WAAO,IAAI,OAAO,4BAA4B,GAAG,QAAQ,GAAG,IAAI,KAAK;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAe,OAAwC;AAC5E,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO,IAAI,OAAO,qBAAqB,KAAK;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,aAAa,OAAe,OAAwC;AAC3E,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,IAAI,OAAO,oBAAoB,KAAK;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,OAAe,OAAwC;AACnF,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,WAAO,IAAI,OAAO,8BAA8B,KAAK;AAAA,EACvD;AACA,SAAO;AACT;AAYO,SAAS,yBAAyB,QAAmC;AAC1E,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO,EAAE,OAAO,MAAM,QAAQ,CAAC,EAAE;AAAA,EACnC;AAEA,QAAM,SAA4B,CAAC;AACnC,QAAM,SAAS;AAEf,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,WAAO,EAAE,OAAO,OAAO,QAAQ,CAAC,IAAI,QAAQ,qBAAqB,MAAM,CAAC,EAAE;AAAA,EAC5E;AAEA,MAAI,aAAa,UAAU,OAAO,YAAY,QAAW;AACvD,UAAM,IAAI,cAAc,GAAG,MAAM,YAAY,OAAO,OAAO;AAC3D,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,MAAI,cAAc,UAAU,OAAO,aAAa,QAAW;AACzD,UAAM,IAAI,MAAM,GAAG,MAAM,aAAa,OAAO,UAAU,kBAAkB;AACzE,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,MAAI,uBAAuB,UAAU,OAAO,sBAAsB,QAAW;AAC3E,UAAM,IAAI,cAAc,GAAG,MAAM,sBAAsB,OAAO,mBAAmB,GAAG,EAAE;AACtF,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,MAAI,sBAAsB,UAAU,OAAO,qBAAqB,QAAW;AACzE,UAAM,IAAI,cAAc,GAAG,MAAM,qBAAqB,OAAO,kBAAkB,GAAG,EAAE;AACpF,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,MAAI,kBAAkB,UAAU,OAAO,iBAAiB,QAAW;AACjE,UAAM,IAAI,aAAa,GAAG,MAAM,iBAAiB,OAAO,YAAY;AACpE,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,MAAI,oBAAoB,UAAU,OAAO,mBAAmB,QAAW;AACrE,UAAM,IAAI,cAAc,GAAG,MAAM,mBAAmB,OAAO,gBAAgB,GAAG,EAAE;AAChF,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAEA,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;AAQO,SAAS,4BAA4B,QAAmC;AAC7E,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO,EAAE,OAAO,MAAM,QAAQ,CAAC,EAAE;AAAA,EACnC;AAEA,QAAM,SAA4B,CAAC;AACnC,QAAM,SAAS;AAEf,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,WAAO,EAAE,OAAO,OAAO,QAAQ,CAAC,IAAI,QAAQ,qBAAqB,MAAM,CAAC,EAAE;AAAA,EAC5E;AAGA,MAAI,EAAE,QAAQ,WAAW,OAAO,OAAO,QAAW;AAChD,WAAO,KAAK,IAAI,GAAG,MAAM,OAAO,6BAA6B,MAAS,CAAC;AAAA,EACzE,OAAO;AACL,UAAM,IAAI,qBAAqB,GAAG,MAAM,OAAO,OAAO,EAAE;AACxD,QAAI,EAAG,QAAO,KAAK,CAAC;AAAA,EACtB;AAGA,MAAI,EAAE,WAAW,WAAW,OAAO,UAAU,QAAW;AACtD,WAAO,KAAK,IAAI,GAAG,MAAM,UAAU,6BAA6B,MAAS,CAAC;AAAA,EAC5E,OAAO;AACL,UAAM,IAAI,qBAAqB,GAAG,MAAM,UAAU,OAAO,KAAK;AAC9D,QAAI,GAAG;AACL,aAAO,KAAK,CAAC;AAAA,IACf,WAAW,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,KAAK;AACxE,aAAO,KAAK,IAAI,GAAG,MAAM,UAAU,kCAAkC,OAAO,KAAK,CAAC;AAAA,IACpF;AAAA,EACF;AAGA,MAAI,EAAE,iBAAiB,WAAW,OAAO,gBAAgB,QAAW;AAClE,WAAO,KAAK,IAAI,GAAG,MAAM,gBAAgB,6BAA6B,MAAS,CAAC;AAAA,EAClF,WAAW,OAAO,OAAO,gBAAgB,UAAU;AACjD,WAAO,KAAK,IAAI,GAAG,MAAM,gBAAgB,oBAAoB,OAAO,WAAW,CAAC;AAAA,EAClF,WAAW,MAAM,KAAK,MAAM,OAAO,WAAW,CAAC,GAAG;AAChD,WAAO,KAAK,IAAI,GAAG,MAAM,gBAAgB,wCAAwC,OAAO,WAAW,CAAC;AAAA,EACtG;AAEA,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;AAgBO,SAAS,sBAAsB,QAAmC;AACvE,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO,EAAE,OAAO,MAAM,QAAQ,CAAC,EAAE;AAAA,EACnC;AAEA,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,WAAO,EAAE,OAAO,OAAO,QAAQ,CAAC,IAAI,UAAU,qBAAqB,MAAM,CAAC,EAAE;AAAA,EAC9E;AAEA,QAAM,UAAU;AAAA,IACd,yBAAyB,OAAO,UAAU;AAAA,IAC1C,4BAA4B,OAAO,mBAAmB;AAAA,EACxD;AAEA,QAAM,SAAS,QAAQ,QAAQ,OAAK,EAAE,MAAM;AAC5C,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;AAQO,SAAS,uBAAuB,QAAqC;AAC1E,SAAO,OAAO,IAAI,OAAK;AACrB,UAAM,WAAW,EAAE,UAAU,SAAY,cAAc,KAAK,UAAU,EAAE,KAAK;AAC7E,WAAO,KAAK,EAAE,KAAK,KAAK,EAAE,OAAO,SAAS,QAAQ;AAAA,EACpD,CAAC;AACH;","names":[]}

package/dist/cli/config/writer.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Config Writer
+ *
+ * Provides safe config file writing with atomic operations and proper permissions.
+ *
+ * Security features:
+ * - Global config (contains API key) written with mode 0600 (owner read/write only)
+ * - Global directory created with mode 0700 (owner access only)
+ * - Project config written with standard permissions (0644)
+ * - Path validation to prevent writes outside allowed directories
+ */
+import { GlobalConfig, ProjectConfig } from './types.js';
+import type { ActiveSpecification, AgentTeamsConfig } from './agent-teams.types.js';
+/**
+ * Ensure global config directory exists with secure permissions
+ *
+ * Creates ~/.specforge/ if it doesn't exist, with mode 0700 (owner-only access).
+ * Idempotent - safe to call multiple times.
+ *
+ * @throws Error if directory creation fails
+ *
+ * @example
+ * ```typescript
+ * ensureGlobalDir();
+ * // ~/.specforge/ now exists with drwx------ permissions
+ * ```
+ */
+export declare function ensureGlobalDir(): void;
+/**
+ * Save global configuration
+ *
+ * Merges the provided config with existing global config and writes to
+ * ~/.specforge/config.json with secure permissions (0600).
+ *
+ * Undefined values are removed from the final config.
+ *
+ * @param config - Partial global config to save
+ * @throws Error if write fails
+ *
+ * @example
+ * ```typescript
+ * // Save API key
+ * saveGlobalConfig({ apiKey: 'sf_live_...' });
+ *
+ * // Update MCP output format, keeping existing apiKey
+ * saveGlobalConfig({ mcpOutputFormat: 'json' });
+ * ```
+ */
+export declare function saveGlobalConfig(config: Partial<GlobalConfig>): void;
+/**
+ * Delete a field from global config
+ *
+ * Loads existing config, removes the specified field, and saves.
+ * No-op if the field doesn't exist.
+ *
+ * @param field - Field name to remove
+ * @throws Error if read/write fails
+ *
+ * @example
+ * ```typescript
+ * deleteGlobalConfigField('apiKey');
+ * deleteGlobalConfigField('defaultProjectId');
+ * ```
+ */
+export declare function deleteGlobalConfigField(field: keyof GlobalConfig): void;
+/**
+ * Save project configuration
+ *
+ * Merges the provided config with existing project config and writes to
+ * `.specforge/config.json` in the target directory.
+ *
+ * Undefined values are removed from the final config.
+ *
+ * @param config - Partial project config to save
+ * @param targetDir - Directory to write the config under (defaults to cwd)
+ * @throws Error if write fails
+ * @throws ConfigError if a legacy `.specforge.json` is detected
+ */
+export declare function saveProjectConfig(config: Partial<ProjectConfig>, targetDir?: string): void;
+/**
+ * Set the active specification in .specforge.json
+ *
+ * Updates only the `activeSpecification` section, preserving all other fields.
+ * Pass `null` to remove the active specification entirely.
+ *
+ * @param spec - ActiveSpecification to set, or null to clear
+ * @param targetDir - Directory containing .specforge.json (defaults to cwd)
+ *
+ * @example
+ * ```typescript
+ * // Set active specification
+ * setActiveSpecification({ id: 'spec_123', title: 'My Spec', activatedAt: new Date().toISOString() });
+ *
+ * // Clear active specification
+ * setActiveSpecification(null);
+ * ```
+ */
+export declare function setActiveSpecification(spec: ActiveSpecification | null, targetDir?: string): void;
+/**
+ * Update the Agent Teams configuration in .specforge/config.json (v2.0.0)
+ *
+ * Claude Code Agent Teams only.
+ *
+ * Merges the provided partial config with the existing `agentTeams` section,
+ * preserving all other fields. Only the keys present in `config` are overwritten.
+ * Deprecated pre-v2.0.0 fields are stripped on write.
+ *
+ * @param config - Partial AgentTeamsConfig to merge
+ * @param targetDir - Directory containing config (defaults to cwd)
+ */
+export declare function setAgentTeamsConfig(config: Partial<AgentTeamsConfig>, targetDir?: string): void;
+/**
+ * Add an entry to .gitignore if it exists
+ *
+ * Does not create .gitignore if it doesn't exist.
+ * Does not duplicate existing entries.
+ *
+ * @param entry - Line to add to .gitignore
+ * @param targetDir - Directory containing .gitignore (defaults to cwd)
+ * @returns true if entry was added, false if already exists or no .gitignore
+ *
+ * @example
+ * ```typescript
+ * const added = addToGitignore('.specforge.json');
+ * if (added) {
+ *   console.log('Added .specforge.json to .gitignore');
+ * }
+ * ```
+ */
+export declare function addToGitignore(entry: string, targetDir?: string): boolean;
+/**
+ * Remove API key from global config (logout)
+ *
+ * @example
+ * ```typescript
+ * clearApiKey();
+ * console.log('Logged out successfully');
+ * ```
+ */
+export declare function clearApiKey(): void;
+/**
+ * Check if global config file exists
+ *
+ * @returns true if ~/.specforge/config.json exists
+ */
+export declare function hasGlobalConfig(): boolean;
+/**
+ * Check if project config file exists in cwd
+ *
+ * @returns true if .specforge.json exists
+ */
+export declare function hasProjectConfig(): boolean;
+//# sourceMappingURL=writer.d.ts.map

package/dist/cli/config/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../../src/cli/config/writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAEL,YAAY,EACZ,aAAa,EACd,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAEjB,MAAM,wBAAwB,CAAC;AAsBhC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAetC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAgCpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,YAAY,GAAG,IAAI,CAuBvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,EAC9B,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAgCN;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,GAAG,IAAI,EAChC,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAaN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAiBN;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAiCzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/cli/config/writer.js

@@ -0,0 +1,168 @@
+import fs from "node:fs";
+import path from "node:path";
+import {
+  CONFIG_FILES
+} from "./types.js";
+import { DEPRECATED_AGENT_TEAMS_FIELDS } from "./agent-teams.types.js";
+import {
+  getGlobalConfigDir,
+  getGlobalConfigPath,
+  getProjectConfigPath
+} from "./paths.js";
+import { loadGlobalConfig, tryLoadProjectConfig } from "./loader.js";
+const PERMISSIONS = {
+  /** Directory accessible only by owner (rwx------) */
+  SECURE_DIR: 448,
+  /** File readable/writable only by owner (rw-------) */
+  SECRET_FILE: 384,
+  /** Regular file permissions (rw-r--r--) */
+  REGULAR_FILE: 420
+};
+function ensureGlobalDir() {
+  const globalDir = getGlobalConfigDir();
+  if (fs.existsSync(globalDir)) {
+    return;
+  }
+  try {
+    fs.mkdirSync(globalDir, { mode: PERMISSIONS.SECURE_DIR, recursive: true });
+  } catch (error) {
+    throw new Error(
+      `Failed to create global config directory: ${globalDir}
+Error: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+function saveGlobalConfig(config) {
+  ensureGlobalDir();
+  const configPath = getGlobalConfigPath();
+  const existing = loadGlobalConfig();
+  const merged = {
+    ...existing,
+    ...config
+  };
+  Object.keys(merged).forEach((key) => {
+    if (merged[key] === void 0) {
+      delete merged[key];
+    }
+  });
+  const content = JSON.stringify(merged, null, 2) + "\n";
+  try {
+    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.SECRET_FILE });
+  } catch (error) {
+    throw new Error(
+      `Failed to write global config: ${configPath}
+Error: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+function deleteGlobalConfigField(field) {
+  const configPath = getGlobalConfigPath();
+  if (!fs.existsSync(configPath)) {
+    return;
+  }
+  const existing = loadGlobalConfig();
+  delete existing[field];
+  const content = JSON.stringify(existing, null, 2) + "\n";
+  try {
+    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.SECRET_FILE });
+  } catch (error) {
+    throw new Error(
+      `Failed to update global config: ${configPath}
+Error: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+function saveProjectConfig(config, targetDir) {
+  const resolvedDir = targetDir ? path.resolve(targetDir) : process.cwd();
+  const configPath = path.join(resolvedDir, CONFIG_FILES.PROJECT_DIR, "config.json");
+  const existing = tryLoadProjectConfig() || {};
+  const merged = {
+    ...existing,
+    ...config
+  };
+  Object.keys(merged).forEach((key) => {
+    if (merged[key] === void 0) {
+      delete merged[key];
+    }
+  });
+  const specforgeDir = path.dirname(configPath);
+  if (!fs.existsSync(specforgeDir)) {
+    fs.mkdirSync(specforgeDir, { recursive: true });
+  }
+  const content = JSON.stringify(merged, null, 2) + "\n";
+  try {
+    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.REGULAR_FILE });
+  } catch (error) {
+    throw new Error(
+      `Failed to write project config: ${configPath}
+Error: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+function setActiveSpecification(spec, targetDir) {
+  const existing = tryLoadProjectConfig() || {};
+  const updated = structuredClone(existing);
+  if (spec === null) {
+    updated.activeSpecification = void 0;
+  } else {
+    updated.activeSpecification = spec;
+  }
+  saveProjectConfig(updated, targetDir);
+}
+function setAgentTeamsConfig(config, targetDir) {
+  const existing = tryLoadProjectConfig() || {};
+  const updated = structuredClone(existing);
+  const merged = {
+    ...updated.agentTeams,
+    ...config
+  };
+  for (const field of DEPRECATED_AGENT_TEAMS_FIELDS) {
+    delete merged[field];
+  }
+  updated.agentTeams = merged;
+  saveProjectConfig(updated, targetDir);
+}
+function addToGitignore(entry, targetDir) {
+  const gitignorePath = targetDir ? path.join(path.resolve(targetDir), ".gitignore") : path.resolve(".gitignore");
+  if (!fs.existsSync(gitignorePath)) {
+    return false;
+  }
+  try {
+    const content = fs.readFileSync(gitignorePath, "utf-8");
+    const lines = content.split("\n");
+    const normalizedEntry = entry.trim();
+    if (lines.some((line) => line.trim() === normalizedEntry)) {
+      return false;
+    }
+    const newContent = content.endsWith("\n") ? content + normalizedEntry + "\n" : content + "\n" + normalizedEntry + "\n";
+    fs.writeFileSync(gitignorePath, newContent);
+    return true;
+  } catch (error) {
+    console.warn(
+      `Warning: Could not update .gitignore: ${error instanceof Error ? error.message : String(error)}`
+    );
+    return false;
+  }
+}
+function clearApiKey() {
+  deleteGlobalConfigField("apiKey");
+}
+function hasGlobalConfig() {
+  return fs.existsSync(getGlobalConfigPath());
+}
+function hasProjectConfig() {
+  return fs.existsSync(getProjectConfigPath());
+}
+export {
+  addToGitignore,
+  clearApiKey,
+  deleteGlobalConfigField,
+  ensureGlobalDir,
+  hasGlobalConfig,
+  hasProjectConfig,
+  saveGlobalConfig,
+  saveProjectConfig,
+  setActiveSpecification,
+  setAgentTeamsConfig
+};
+//# sourceMappingURL=writer.js.map

package/dist/cli/config/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/config/writer.ts"],"sourcesContent":["/**\n * Config Writer\n *\n * Provides safe config file writing with atomic operations and proper permissions.\n *\n * Security features:\n * - Global config (contains API key) written with mode 0600 (owner read/write only)\n * - Global directory created with mode 0700 (owner access only)\n * - Project config written with standard permissions (0644)\n * - Path validation to prevent writes outside allowed directories\n */\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport {\n  CONFIG_FILES,\n  GlobalConfig,\n  ProjectConfig,\n} from './types.js';\nimport type {\n  ActiveSpecification,\n  AgentTeamsConfig,\n  SpecforgeJsonConfig,\n} from './agent-teams.types.js';\nimport { DEPRECATED_AGENT_TEAMS_FIELDS } from './agent-teams.types.js';\nimport {\n  getGlobalConfigDir,\n  getGlobalConfigPath,\n  getProjectConfigPath,\n  isWithinGlobalDir,\n} from './paths.js';\nimport { loadGlobalConfig, tryLoadProjectConfig } from './loader.js';\n\n/**\n * File permission constants\n */\nconst PERMISSIONS = {\n  /** Directory accessible only by owner (rwx------) */\n  SECURE_DIR: 0o700,\n  /** File readable/writable only by owner (rw-------) */\n  SECRET_FILE: 0o600,\n  /** Regular file permissions (rw-r--r--) */\n  REGULAR_FILE: 0o644,\n} as const;\n\n/**\n * Ensure global config directory exists with secure permissions\n *\n * Creates ~/.specforge/ if it doesn't exist, with mode 0700 (owner-only access).\n * Idempotent - safe to call multiple times.\n *\n * @throws Error if directory creation fails\n *\n * @example\n * ```typescript\n * ensureGlobalDir();\n * // ~/.specforge/ now exists with drwx------ permissions\n * ```\n */\nexport function ensureGlobalDir(): void {\n  const globalDir = getGlobalConfigDir();\n\n  if (fs.existsSync(globalDir)) {\n    return; // Already exists\n  }\n\n  try {\n    fs.mkdirSync(globalDir, { mode: PERMISSIONS.SECURE_DIR, recursive: true });\n  } catch (error) {\n    throw new Error(\n      `Failed to create global config directory: ${globalDir}\\n` +\n      `Error: ${error instanceof Error ? error.message : String(error)}`\n    );\n  }\n}\n\n/**\n * Save global configuration\n *\n * Merges the provided config with existing global config and writes to\n * ~/.specforge/config.json with secure permissions (0600).\n *\n * Undefined values are removed from the final config.\n *\n * @param config - Partial global config to save\n * @throws Error if write fails\n *\n * @example\n * ```typescript\n * // Save API key\n * saveGlobalConfig({ apiKey: 'sf_live_...' });\n *\n * // Update MCP output format, keeping existing apiKey\n * saveGlobalConfig({ mcpOutputFormat: 'json' });\n * ```\n */\nexport function saveGlobalConfig(config: Partial<GlobalConfig>): void {\n  ensureGlobalDir();\n\n  const configPath = getGlobalConfigPath();\n\n  // Load existing config\n  const existing = loadGlobalConfig();\n\n  // Merge configs\n  const merged: GlobalConfig = {\n    ...existing,\n    ...config,\n  };\n\n  // Remove undefined values\n  Object.keys(merged).forEach(key => {\n    if (merged[key as keyof GlobalConfig] === undefined) {\n      delete merged[key as keyof GlobalConfig];\n    }\n  });\n\n  // Write with secure permissions\n  const content = JSON.stringify(merged, null, 2) + '\\n';\n\n  try {\n    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.SECRET_FILE });\n  } catch (error) {\n    throw new Error(\n      `Failed to write global config: ${configPath}\\n` +\n      `Error: ${error instanceof Error ? error.message : String(error)}`\n    );\n  }\n}\n\n/**\n * Delete a field from global config\n *\n * Loads existing config, removes the specified field, and saves.\n * No-op if the field doesn't exist.\n *\n * @param field - Field name to remove\n * @throws Error if read/write fails\n *\n * @example\n * ```typescript\n * deleteGlobalConfigField('apiKey');\n * deleteGlobalConfigField('defaultProjectId');\n * ```\n */\nexport function deleteGlobalConfigField(field: keyof GlobalConfig): void {\n  const configPath = getGlobalConfigPath();\n\n  if (!fs.existsSync(configPath)) {\n    return; // No config to modify\n  }\n\n  const existing = loadGlobalConfig();\n\n  // Remove field\n  delete existing[field];\n\n  // Save updated config\n  const content = JSON.stringify(existing, null, 2) + '\\n';\n\n  try {\n    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.SECRET_FILE });\n  } catch (error) {\n    throw new Error(\n      `Failed to update global config: ${configPath}\\n` +\n      `Error: ${error instanceof Error ? error.message : String(error)}`\n    );\n  }\n}\n\n/**\n * Save project configuration\n *\n * Merges the provided config with existing project config and writes to\n * `.specforge/config.json` in the target directory.\n *\n * Undefined values are removed from the final config.\n *\n * @param config - Partial project config to save\n * @param targetDir - Directory to write the config under (defaults to cwd)\n * @throws Error if write fails\n * @throws ConfigError if a legacy `.specforge.json` is detected\n */\nexport function saveProjectConfig(\n  config: Partial<ProjectConfig>,\n  targetDir?: string\n): void {\n  const resolvedDir = targetDir ? path.resolve(targetDir) : process.cwd();\n  const configPath = path.join(resolvedDir, CONFIG_FILES.PROJECT_DIR, 'config.json');\n\n  const existing = tryLoadProjectConfig() || {};\n\n  const merged: ProjectConfig = {\n    ...existing,\n    ...config,\n  };\n\n  Object.keys(merged).forEach(key => {\n    if (merged[key as keyof ProjectConfig] === undefined) {\n      delete merged[key as keyof ProjectConfig];\n    }\n  });\n\n  const specforgeDir = path.dirname(configPath);\n  if (!fs.existsSync(specforgeDir)) {\n    fs.mkdirSync(specforgeDir, { recursive: true });\n  }\n\n  const content = JSON.stringify(merged, null, 2) + '\\n';\n\n  try {\n    fs.writeFileSync(configPath, content, { mode: PERMISSIONS.REGULAR_FILE });\n  } catch (error) {\n    throw new Error(\n      `Failed to write project config: ${configPath}\\n` +\n      `Error: ${error instanceof Error ? error.message : String(error)}`\n    );\n  }\n}\n\n/**\n * Set the active specification in .specforge.json\n *\n * Updates only the `activeSpecification` section, preserving all other fields.\n * Pass `null` to remove the active specification entirely.\n *\n * @param spec - ActiveSpecification to set, or null to clear\n * @param targetDir - Directory containing .specforge.json (defaults to cwd)\n *\n * @example\n * ```typescript\n * // Set active specification\n * setActiveSpecification({ id: 'spec_123', title: 'My Spec', activatedAt: new Date().toISOString() });\n *\n * // Clear active specification\n * setActiveSpecification(null);\n * ```\n */\nexport function setActiveSpecification(\n  spec: ActiveSpecification | null,\n  targetDir?: string\n): void {\n  const existing: SpecforgeJsonConfig = tryLoadProjectConfig() || {};\n  const updated = structuredClone(existing);\n\n  if (spec === null) {\n    // Set to undefined (not delete) so the spread in saveProjectConfig\n    // overrides the existing value, and the remove-undefined loop cleans it up.\n    updated.activeSpecification = undefined;\n  } else {\n    updated.activeSpecification = spec;\n  }\n\n  saveProjectConfig(updated as Partial<ProjectConfig>, targetDir);\n}\n\n/**\n * Update the Agent Teams configuration in .specforge/config.json (v2.0.0)\n *\n * Claude Code Agent Teams only.\n *\n * Merges the provided partial config with the existing `agentTeams` section,\n * preserving all other fields. Only the keys present in `config` are overwritten.\n * Deprecated pre-v2.0.0 fields are stripped on write.\n *\n * @param config - Partial AgentTeamsConfig to merge\n * @param targetDir - Directory containing config (defaults to cwd)\n */\nexport function setAgentTeamsConfig(\n  config: Partial<AgentTeamsConfig>,\n  targetDir?: string\n): void {\n  const existing: SpecforgeJsonConfig = tryLoadProjectConfig() || {};\n  const updated = structuredClone(existing);\n\n  const merged: Record<string, unknown> = {\n    ...updated.agentTeams,\n    ...config,\n  };\n\n  // Strip deprecated pre-v2.0.0 fields\n  for (const field of DEPRECATED_AGENT_TEAMS_FIELDS) {\n    delete merged[field];\n  }\n\n  updated.agentTeams = merged as AgentTeamsConfig;\n\n  saveProjectConfig(updated, targetDir);\n}\n\n/**\n * Add an entry to .gitignore if it exists\n *\n * Does not create .gitignore if it doesn't exist.\n * Does not duplicate existing entries.\n *\n * @param entry - Line to add to .gitignore\n * @param targetDir - Directory containing .gitignore (defaults to cwd)\n * @returns true if entry was added, false if already exists or no .gitignore\n *\n * @example\n * ```typescript\n * const added = addToGitignore('.specforge.json');\n * if (added) {\n *   console.log('Added .specforge.json to .gitignore');\n * }\n * ```\n */\nexport function addToGitignore(entry: string, targetDir?: string): boolean {\n  const gitignorePath = targetDir\n    ? path.join(path.resolve(targetDir), '.gitignore')\n    : path.resolve('.gitignore');\n\n  if (!fs.existsSync(gitignorePath)) {\n    return false;\n  }\n\n  try {\n    const content = fs.readFileSync(gitignorePath, 'utf-8');\n    const lines = content.split('\\n');\n\n    // Check if entry already exists (exact match, trimmed)\n    const normalizedEntry = entry.trim();\n    if (lines.some(line => line.trim() === normalizedEntry)) {\n      return false; // Already exists\n    }\n\n    // Add entry with proper newline handling\n    const newContent = content.endsWith('\\n')\n      ? content + normalizedEntry + '\\n'\n      : content + '\\n' + normalizedEntry + '\\n';\n\n    fs.writeFileSync(gitignorePath, newContent);\n    return true;\n  } catch (error) {\n    // Log warning but don't fail - this is a nice-to-have\n    console.warn(\n      `Warning: Could not update .gitignore: ${error instanceof Error ? error.message : String(error)}`\n    );\n    return false;\n  }\n}\n\n/**\n * Remove API key from global config (logout)\n *\n * @example\n * ```typescript\n * clearApiKey();\n * console.log('Logged out successfully');\n * ```\n */\nexport function clearApiKey(): void {\n  deleteGlobalConfigField('apiKey');\n}\n\n/**\n * Check if global config file exists\n *\n * @returns true if ~/.specforge/config.json exists\n */\nexport function hasGlobalConfig(): boolean {\n  return fs.existsSync(getGlobalConfigPath());\n}\n\n/**\n * Check if project config file exists in cwd\n *\n * @returns true if .specforge.json exists\n */\nexport function hasProjectConfig(): boolean {\n  return fs.existsSync(getProjectConfigPath());\n}\n"],"mappings":"AAYA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB;AAAA,EACE;AAAA,OAGK;AAMP,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,kBAAkB,4BAA4B;AAKvD,MAAM,cAAc;AAAA;AAAA,EAElB,YAAY;AAAA;AAAA,EAEZ,aAAa;AAAA;AAAA,EAEb,cAAc;AAChB;AAgBO,SAAS,kBAAwB;AACtC,QAAM,YAAY,mBAAmB;AAErC,MAAI,GAAG,WAAW,SAAS,GAAG;AAC5B;AAAA,EACF;AAEA,MAAI;AACF,OAAG,UAAU,WAAW,EAAE,MAAM,YAAY,YAAY,WAAW,KAAK,CAAC;AAAA,EAC3E,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,6CAA6C,SAAS;AAAA,SAC5C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAClE;AAAA,EACF;AACF;AAsBO,SAAS,iBAAiB,QAAqC;AACpE,kBAAgB;AAEhB,QAAM,aAAa,oBAAoB;AAGvC,QAAM,WAAW,iBAAiB;AAGlC,QAAM,SAAuB;AAAA,IAC3B,GAAG;AAAA,IACH,GAAG;AAAA,EACL;AAGA,SAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AACjC,QAAI,OAAO,GAAyB,MAAM,QAAW;AACnD,aAAO,OAAO,GAAyB;AAAA,IACzC;AAAA,EACF,CAAC;AAGD,QAAM,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI;AAElD,MAAI;AACF,OAAG,cAAc,YAAY,SAAS,EAAE,MAAM,YAAY,YAAY,CAAC;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,kCAAkC,UAAU;AAAA,SAClC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAClE;AAAA,EACF;AACF;AAiBO,SAAS,wBAAwB,OAAiC;AACvE,QAAM,aAAa,oBAAoB;AAEvC,MAAI,CAAC,GAAG,WAAW,UAAU,GAAG;AAC9B;AAAA,EACF;AAEA,QAAM,WAAW,iBAAiB;AAGlC,SAAO,SAAS,KAAK;AAGrB,QAAM,UAAU,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI;AAEpD,MAAI;AACF,OAAG,cAAc,YAAY,SAAS,EAAE,MAAM,YAAY,YAAY,CAAC;AAAA,EACzE,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,mCAAmC,UAAU;AAAA,SACnC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAClE;AAAA,EACF;AACF;AAeO,SAAS,kBACd,QACA,WACM;AACN,QAAM,cAAc,YAAY,KAAK,QAAQ,SAAS,IAAI,QAAQ,IAAI;AACtE,QAAM,aAAa,KAAK,KAAK,aAAa,aAAa,aAAa,aAAa;AAEjF,QAAM,WAAW,qBAAqB,KAAK,CAAC;AAE5C,QAAM,SAAwB;AAAA,IAC5B,GAAG;AAAA,IACH,GAAG;AAAA,EACL;AAEA,SAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AACjC,QAAI,OAAO,GAA0B,MAAM,QAAW;AACpD,aAAO,OAAO,GAA0B;AAAA,IAC1C;AAAA,EACF,CAAC;AAED,QAAM,eAAe,KAAK,QAAQ,UAAU;AAC5C,MAAI,CAAC,GAAG,WAAW,YAAY,GAAG;AAChC,OAAG,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAAA,EAChD;AAEA,QAAM,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI;AAElD,MAAI;AACF,OAAG,cAAc,YAAY,SAAS,EAAE,MAAM,YAAY,aAAa,CAAC;AAAA,EAC1E,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,mCAAmC,UAAU;AAAA,SACnC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAClE;AAAA,EACF;AACF;AAoBO,SAAS,uBACd,MACA,WACM;AACN,QAAM,WAAgC,qBAAqB,KAAK,CAAC;AACjE,QAAM,UAAU,gBAAgB,QAAQ;AAExC,MAAI,SAAS,MAAM;AAGjB,YAAQ,sBAAsB;AAAA,EAChC,OAAO;AACL,YAAQ,sBAAsB;AAAA,EAChC;AAEA,oBAAkB,SAAmC,SAAS;AAChE;AAcO,SAAS,oBACd,QACA,WACM;AACN,QAAM,WAAgC,qBAAqB,KAAK,CAAC;AACjE,QAAM,UAAU,gBAAgB,QAAQ;AAExC,QAAM,SAAkC;AAAA,IACtC,GAAG,QAAQ;AAAA,IACX,GAAG;AAAA,EACL;AAGA,aAAW,SAAS,+BAA+B;AACjD,WAAO,OAAO,KAAK;AAAA,EACrB;AAEA,UAAQ,aAAa;AAErB,oBAAkB,SAAS,SAAS;AACtC;AAoBO,SAAS,eAAe,OAAe,WAA6B;AACzE,QAAM,gBAAgB,YAClB,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,YAAY,IAC/C,KAAK,QAAQ,YAAY;AAE7B,MAAI,CAAC,GAAG,WAAW,aAAa,GAAG;AACjC,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,eAAe,OAAO;AACtD,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAGhC,UAAM,kBAAkB,MAAM,KAAK;AACnC,QAAI,MAAM,KAAK,UAAQ,KAAK,KAAK,MAAM,eAAe,GAAG;AACvD,aAAO;AAAA,IACT;AAGA,UAAM,aAAa,QAAQ,SAAS,IAAI,IACpC,UAAU,kBAAkB,OAC5B,UAAU,OAAO,kBAAkB;AAEvC,OAAG,cAAc,eAAe,UAAU;AAC1C,WAAO;AAAA,EACT,SAAS,OAAO;AAEd,YAAQ;AAAA,MACN,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACjG;AACA,WAAO;AAAA,EACT;AACF;AAWO,SAAS,cAAoB;AAClC,0BAAwB,QAAQ;AAClC;AAOO,SAAS,kBAA2B;AACzC,SAAO,GAAG,WAAW,oBAAoB,CAAC;AAC5C;AAOO,SAAS,mBAA4B;AAC1C,SAAO,GAAG,WAAW,qBAAqB,CAAC;AAC7C;","names":[]}

package/dist/cli/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * SpecForge MCP CLI Entry Point
+ *
+ * Main CLI application using Commander.js.
+ * Sets up command routing, middleware, and global options.
+ */
+import { Command } from 'commander';
+/**
+ * CLI version - read from package.json
+ */
+declare const CLI_VERSION: string;
+/**
+ * The main CLI program instance
+ */
+declare const program: Command;
+/**
+ * Run the CLI with given arguments
+ *
+ * @param argv - Command line arguments (defaults to process.argv)
+ */
+export declare function runCLI(argv?: string[]): void;
+/**
+ * Export program for testing and extension
+ */
+export { program };
+/**
+ * Export version for external use
+ */
+export { CLI_VERSION };
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC;;GAEG;AACH,QAAA,MAAM,WAAW,EAAE,MAAoB,CAAC;AAqKxC;;GAEG;AACH,QAAA,MAAM,OAAO,SAAkB,CAAC;AAShC;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,IAAI,CAa1D;AAED;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB;;GAEG;AACH,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,142 @@
+import { createRequire } from "node:module";
+import { Command } from "commander";
+import { authGuardHook } from "./middleware/auth-guard.js";
+import { withErrorHandler, debugLog, handleError } from "./middleware/error-handler.js";
+import { resolveConfig } from "./config/loader.js";
+import { colors } from "./ui/index.js";
+import { printBanner } from "./ui/banner.js";
+import { CHANNEL } from "../channel.js";
+const BANNER_SKIP_COMMANDS = /* @__PURE__ */ new Set(["init", "login", "serve"]);
+const require2 = createRequire(import.meta.url);
+const pkg = require2("../../package.json");
+import {
+  registerLoginCommand,
+  registerInitCommand,
+  registerConfigureCommand,
+  registerDoctorCommand,
+  registerStatusCommand,
+  registerSwitchCommand,
+  registerFeedbackCommand,
+  registerMembersCommand,
+  registerInvitationsCommand
+} from "./commands/index.js";
+import { registerDebugCommands } from "./commands/debug/index.js";
+import { registerScaffoldCommand } from "./commands/scaffold/index.js";
+const CLI_VERSION = pkg.version;
+const CLI_NAME = CHANNEL.name;
+function createProgram() {
+  const program2 = new Command();
+  program2.name(CLI_NAME).description("SpecForge MCP CLI - Configure and interact with SpecForge").version(CLI_VERSION, "-v, --version", "Display version number");
+  program2.option("--debug", "Enable debug output").option("--no-color", "Disable colored output").option("--json", "Output in JSON format");
+  program2.hook("preAction", (thisCommand, actionCommand) => {
+    const commandName = actionCommand.name();
+    if (thisCommand.opts().debug) {
+      process.env.SPECFORGE_DEBUG = "true";
+    }
+    if (thisCommand.opts().noColor) {
+      process.env.NO_COLOR = "1";
+    }
+    const jsonOutput = !!thisCommand.opts().json;
+    const programState = thisCommand;
+    if (!programState._bannerPrinted && process.stdout.isTTY && !jsonOutput && !BANNER_SKIP_COMMANDS.has(commandName)) {
+      printBanner("compact");
+      programState._bannerPrinted = true;
+    }
+    debugLog(`Running command: ${commandName}`);
+    debugLog("Resolved config:", resolveConfig());
+    authGuardHook({ name: () => commandName });
+  });
+  return program2;
+}
+function registerServeCommand(program2) {
+  program2.command("serve", { isDefault: true, hidden: true }).description("Start MCP server (default)").action(withErrorHandler(async () => {
+    debugLog("Starting MCP server");
+    const { loadConfig, validateConfig } = await import("../config/index.js");
+    const { createServer, startServer } = await import("../server.js");
+    const config = await loadConfig();
+    validateConfig(config);
+    config.mcpOutputFormat = resolveConfig().mcpOutputFormat;
+    const server = await createServer(config);
+    await startServer(server);
+  }));
+}
+function registerCommands(program2) {
+  registerLoginCommand(program2);
+  registerInitCommand(program2);
+  registerConfigureCommand(program2);
+  registerDoctorCommand(program2);
+  registerStatusCommand(program2);
+  registerSwitchCommand(program2);
+  registerDebugCommands(program2);
+  registerScaffoldCommand(program2);
+  registerFeedbackCommand(program2);
+  registerMembersCommand(program2);
+  registerInvitationsCommand(program2);
+}
+function configureHelp(program2) {
+  program2.configureHelp({
+    sortSubcommands: false,
+    subcommandTerm: (cmd) => cmd.name()
+  });
+  program2.addHelpText("after", `
+${colors.muted("Command Groups:")}
+
+  ${colors.bold("Authentication")}
+    login                              Authenticate with SpecForge API
+    configure                          Read/write configuration
+
+  ${colors.bold("Setup")}
+    init                               Initialize SpecForge in a project
+    scaffold                           Generate skills, agents, and commands
+
+  ${colors.bold("Diagnostics")}
+    doctor                             Health check
+    status                             Project status and session info
+
+  ${colors.bold("Context")}
+    switch                             Switch active project or specification
+
+  ${colors.bold("Collaboration")}
+    members                            Manage project members
+    invitations                        Manage invitations
+
+  ${colors.bold("Debug")}
+    debug call                         Direct MCP tool dispatch
+    debug tools                        List available MCP tools
+    debug test                         Connection test
+    debug whoami                       Identity and config info
+
+  ${colors.bold("Info")}
+    feedback                           List and submit feedback
+
+${colors.muted("Examples:")}
+  $ ${CLI_NAME} login                    # Authenticate with API key
+  $ ${CLI_NAME} init                     # Initialize in current directory
+  $ ${CLI_NAME} status                   # Show current status
+  $ ${CLI_NAME} switch <id>              # Switch active project/spec
+
+${colors.muted("Documentation:")}
+  ${colors.primary("https://docs.specforge.com/cli")}
+
+${colors.muted("Report issues:")}
+  ${colors.primary("https://github.com/specforge/mcp/issues")}
+`);
+}
+const program = createProgram();
+registerServeCommand(program);
+registerCommands(program);
+configureHelp(program);
+function runCLI(argv = process.argv) {
+  try {
+    program.parse(argv);
+  } catch (error) {
+    debugLog("CLI parse error:", error);
+    handleError(error);
+  }
+}
+export {
+  CLI_VERSION,
+  program,
+  runCLI
+};
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cli/index.ts"],"sourcesContent":["/**\n * SpecForge MCP CLI Entry Point\n *\n * Main CLI application using Commander.js.\n * Sets up command routing, middleware, and global options.\n */\n\nimport { createRequire } from 'node:module';\nimport { Command } from 'commander';\nimport { authGuardHook } from './middleware/auth-guard.js';\nimport { withErrorHandler, debugLog, handleError } from './middleware/error-handler.js';\nimport { resolveConfig } from './config/loader.js';\nimport { colors } from './ui/index.js';\nimport { printBanner } from './ui/banner.js';\nimport { CHANNEL } from '../channel.js';\n\nconst BANNER_SKIP_COMMANDS = new Set(['init', 'login', 'serve']);\n\nconst require = createRequire(import.meta.url);\nconst pkg = require('../../package.json');\nimport {\n  registerLoginCommand,\n  registerInitCommand,\n  registerConfigureCommand,\n  registerDoctorCommand,\n  registerStatusCommand,\n  registerSwitchCommand,\n  registerFeedbackCommand,\n  registerMembersCommand,\n  registerInvitationsCommand,\n} from './commands/index.js';\nimport { registerDebugCommands } from './commands/debug/index.js';\nimport { registerScaffoldCommand } from './commands/scaffold/index.js';\n\n/**\n * CLI version - read from package.json\n */\nconst CLI_VERSION: string = pkg.version;\n\n/**\n * CLI name for display — varies per build channel (`specforge` vs.\n * `specforge-canary`). The `SpecForge` brand text in banners stays fixed.\n */\nconst CLI_NAME = CHANNEL.name;\n\n/**\n * Create and configure the CLI program\n */\nfunction createProgram(): Command {\n  const program = new Command();\n\n  // Basic program info\n  program\n    .name(CLI_NAME)\n    .description('SpecForge MCP CLI - Configure and interact with SpecForge')\n    .version(CLI_VERSION, '-v, --version', 'Display version number');\n\n  // Global options\n  program\n    .option('--debug', 'Enable debug output')\n    .option('--no-color', 'Disable colored output')\n    .option('--json', 'Output in JSON format');\n\n  // Pre-action hook for auth guard\n  program.hook('preAction', (thisCommand, actionCommand) => {\n    const commandName = actionCommand.name();\n\n    // Set debug mode from flag\n    if (thisCommand.opts().debug) {\n      process.env.SPECFORGE_DEBUG = 'true';\n    }\n\n    // Disable colors if requested\n    if (thisCommand.opts().noColor) {\n      // chalk.level = 0 is handled in colors module\n      process.env.NO_COLOR = '1';\n    }\n\n    // Compact brand header for human-facing commands\n    const jsonOutput = !!thisCommand.opts().json;\n    const programState = thisCommand as Command & { _bannerPrinted?: boolean };\n    if (\n      !programState._bannerPrinted &&\n      process.stdout.isTTY &&\n      !jsonOutput &&\n      !BANNER_SKIP_COMMANDS.has(commandName)\n    ) {\n      printBanner('compact');\n      programState._bannerPrinted = true;\n    }\n\n    debugLog(`Running command: ${commandName}`);\n    debugLog('Resolved config:', resolveConfig());\n\n    // Run auth guard\n    authGuardHook({ name: () => commandName });\n  });\n\n  return program;\n}\n\n/**\n * Register the default serve command (MCP server mode)\n *\n * This is the hidden default when no subcommand is provided.\n * Maintains backward compatibility with direct MCP server usage.\n */\nfunction registerServeCommand(program: Command): void {\n  program\n    .command('serve', { isDefault: true, hidden: true })\n    .description('Start MCP server (default)')\n    .action(withErrorHandler(async () => {\n      debugLog('Starting MCP server');\n\n      // Dynamic import to avoid loading server code for CLI commands\n      const { loadConfig, validateConfig } = await import('../config/index.js');\n      const { createServer, startServer } = await import('../server.js');\n\n      // Load and validate config\n      const config = await loadConfig();\n      validateConfig(config);\n      // Honor the resolved MCP output format (env > project > global > default).\n      config.mcpOutputFormat = resolveConfig().mcpOutputFormat;\n\n      // Create and start server\n      const server = await createServer(config);\n      await startServer(server);\n    }));\n}\n\n/**\n * Register all CLI commands\n */\nfunction registerCommands(program: Command): void {\n  registerLoginCommand(program);\n  registerInitCommand(program);\n  registerConfigureCommand(program);\n  registerDoctorCommand(program);\n  registerStatusCommand(program);\n  registerSwitchCommand(program);\n  registerDebugCommands(program);\n  registerScaffoldCommand(program);\n  registerFeedbackCommand(program);\n  registerMembersCommand(program);\n  registerInvitationsCommand(program);\n}\n\n/**\n * Configure help output styling\n */\nfunction configureHelp(program: Command): void {\n  program.configureHelp({\n    sortSubcommands: false,\n    subcommandTerm: (cmd) => cmd.name(),\n  });\n\n  // Custom help with organized command groups\n  program.addHelpText('after', `\n${colors.muted('Command Groups:')}\n\n  ${colors.bold('Authentication')}\n    login                              Authenticate with SpecForge API\n    configure                          Read/write configuration\n\n  ${colors.bold('Setup')}\n    init                               Initialize SpecForge in a project\n    scaffold                           Generate skills, agents, and commands\n\n  ${colors.bold('Diagnostics')}\n    doctor                             Health check\n    status                             Project status and session info\n\n  ${colors.bold('Context')}\n    switch                             Switch active project or specification\n\n  ${colors.bold('Collaboration')}\n    members                            Manage project members\n    invitations                        Manage invitations\n\n  ${colors.bold('Debug')}\n    debug call                         Direct MCP tool dispatch\n    debug tools                        List available MCP tools\n    debug test                         Connection test\n    debug whoami                       Identity and config info\n\n  ${colors.bold('Info')}\n    feedback                           List and submit feedback\n\n${colors.muted('Examples:')}\n  $ ${CLI_NAME} login                    # Authenticate with API key\n  $ ${CLI_NAME} init                     # Initialize in current directory\n  $ ${CLI_NAME} status                   # Show current status\n  $ ${CLI_NAME} switch <id>              # Switch active project/spec\n\n${colors.muted('Documentation:')}\n  ${colors.primary('https://docs.specforge.com/cli')}\n\n${colors.muted('Report issues:')}\n  ${colors.primary('https://github.com/specforge/mcp/issues')}\n`);\n}\n\n/**\n * The main CLI program instance\n */\nconst program = createProgram();\n\n// Register commands\nregisterServeCommand(program);\nregisterCommands(program);\n\n// Configure help\nconfigureHelp(program);\n\n/**\n * Run the CLI with given arguments\n *\n * @param argv - Command line arguments (defaults to process.argv)\n */\nexport function runCLI(argv: string[] = process.argv): void {\n  try {\n    program.parse(argv);\n  } catch (error) {\n    // Commander handles action-handler errors via `withErrorHandler`, but\n    // anything thrown from a `preAction` hook (e.g. `resolveConfig()`\n    // surfacing a `LEGACY_CONFIG_DETECTED` ConfigError for a project dir\n    // with a legacy `.specforge.json`) reaches here. Use the shared\n    // formatter so the user sees the message + hint instead of a silent\n    // exit. Keep `debugLog` for stack-trace-under-debug ergonomics.\n    debugLog('CLI parse error:', error);\n    handleError(error);\n  }\n}\n\n/**\n * Export program for testing and extension\n */\nexport { program };\n\n/**\n * Export version for external use\n */\nexport { CLI_VERSION };\n"],"mappings":"AAOA,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,UAAU,mBAAmB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,eAAe;AAExB,MAAM,uBAAuB,oBAAI,IAAI,CAAC,QAAQ,SAAS,OAAO,CAAC;AAE/D,MAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,MAAM,MAAMA,SAAQ,oBAAoB;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAKxC,MAAM,cAAsB,IAAI;AAMhC,MAAM,WAAW,QAAQ;AAKzB,SAAS,gBAAyB;AAChC,QAAMC,WAAU,IAAI,QAAQ;AAG5B,EAAAA,SACG,KAAK,QAAQ,EACb,YAAY,2DAA2D,EACvE,QAAQ,aAAa,iBAAiB,wBAAwB;AAGjE,EAAAA,SACG,OAAO,WAAW,qBAAqB,EACvC,OAAO,cAAc,wBAAwB,EAC7C,OAAO,UAAU,uBAAuB;AAG3C,EAAAA,SAAQ,KAAK,aAAa,CAAC,aAAa,kBAAkB;AACxD,UAAM,cAAc,cAAc,KAAK;AAGvC,QAAI,YAAY,KAAK,EAAE,OAAO;AAC5B,cAAQ,IAAI,kBAAkB;AAAA,IAChC;AAGA,QAAI,YAAY,KAAK,EAAE,SAAS;AAE9B,cAAQ,IAAI,WAAW;AAAA,IACzB;AAGA,UAAM,aAAa,CAAC,CAAC,YAAY,KAAK,EAAE;AACxC,UAAM,eAAe;AACrB,QACE,CAAC,aAAa,kBACd,QAAQ,OAAO,SACf,CAAC,cACD,CAAC,qBAAqB,IAAI,WAAW,GACrC;AACA,kBAAY,SAAS;AACrB,mBAAa,iBAAiB;AAAA,IAChC;AAEA,aAAS,oBAAoB,WAAW,EAAE;AAC1C,aAAS,oBAAoB,cAAc,CAAC;AAG5C,kBAAc,EAAE,MAAM,MAAM,YAAY,CAAC;AAAA,EAC3C,CAAC;AAED,SAAOA;AACT;AAQA,SAAS,qBAAqBA,UAAwB;AACpD,EAAAA,SACG,QAAQ,SAAS,EAAE,WAAW,MAAM,QAAQ,KAAK,CAAC,EAClD,YAAY,4BAA4B,EACxC,OAAO,iBAAiB,YAAY;AACnC,aAAS,qBAAqB;AAG9B,UAAM,EAAE,YAAY,eAAe,IAAI,MAAM,OAAO,oBAAoB;AACxE,UAAM,EAAE,cAAc,YAAY,IAAI,MAAM,OAAO,cAAc;AAGjE,UAAM,SAAS,MAAM,WAAW;AAChC,mBAAe,MAAM;AAErB,WAAO,kBAAkB,cAAc,EAAE;AAGzC,UAAM,SAAS,MAAM,aAAa,MAAM;AACxC,UAAM,YAAY,MAAM;AAAA,EAC1B,CAAC,CAAC;AACN;AAKA,SAAS,iBAAiBA,UAAwB;AAChD,uBAAqBA,QAAO;AAC5B,sBAAoBA,QAAO;AAC3B,2BAAyBA,QAAO;AAChC,wBAAsBA,QAAO;AAC7B,wBAAsBA,QAAO;AAC7B,wBAAsBA,QAAO;AAC7B,wBAAsBA,QAAO;AAC7B,0BAAwBA,QAAO;AAC/B,0BAAwBA,QAAO;AAC/B,yBAAuBA,QAAO;AAC9B,6BAA2BA,QAAO;AACpC;AAKA,SAAS,cAAcA,UAAwB;AAC7C,EAAAA,SAAQ,cAAc;AAAA,IACpB,iBAAiB;AAAA,IACjB,gBAAgB,CAAC,QAAQ,IAAI,KAAK;AAAA,EACpC,CAAC;AAGD,EAAAA,SAAQ,YAAY,SAAS;AAAA,EAC7B,OAAO,MAAM,iBAAiB,CAAC;AAAA;AAAA,IAE7B,OAAO,KAAK,gBAAgB,CAAC;AAAA;AAAA;AAAA;AAAA,IAI7B,OAAO,KAAK,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA,IAIpB,OAAO,KAAK,aAAa,CAAC;AAAA;AAAA;AAAA;AAAA,IAI1B,OAAO,KAAK,SAAS,CAAC;AAAA;AAAA;AAAA,IAGtB,OAAO,KAAK,eAAe,CAAC;AAAA;AAAA;AAAA;AAAA,IAI5B,OAAO,KAAK,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMpB,OAAO,KAAK,MAAM,CAAC;AAAA;AAAA;AAAA,EAGrB,OAAO,MAAM,WAAW,CAAC;AAAA,MACrB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA;AAAA,EAEZ,OAAO,MAAM,gBAAgB,CAAC;AAAA,IAC5B,OAAO,QAAQ,gCAAgC,CAAC;AAAA;AAAA,EAElD,OAAO,MAAM,gBAAgB,CAAC;AAAA,IAC5B,OAAO,QAAQ,yCAAyC,CAAC;AAAA,CAC5D;AACD;AAKA,MAAM,UAAU,cAAc;AAG9B,qBAAqB,OAAO;AAC5B,iBAAiB,OAAO;AAGxB,cAAc,OAAO;AAOd,SAAS,OAAO,OAAiB,QAAQ,MAAY;AAC1D,MAAI;AACF,YAAQ,MAAM,IAAI;AAAA,EACpB,SAAS,OAAO;AAOd,aAAS,oBAAoB,KAAK;AAClC,gBAAY,KAAK;AAAA,EACnB;AACF;","names":["require","program"]}